| Package | Affected versions | Patched versions |
|---|---|---|
| http server | < 2.4.52 | 2.4.52 |
| communications element manager | ≤ 9.0 | |
| communications operations monitor | = 4.3= 4.4= 5.0 | |
| communications session report manager | ≤ 9.0 | |
| communications session route manager | ≤ 9.0 | |
| http server | = 12.2.1.3.0= 12.2.1.4.0 | |
| instantis enterprisetrack | = 17.1= 17.2= 17.3 | |
| zfs storage appliance kit | = 8.8 | |
| tenable.sc | ≥ 5.16.0, < 5.20.0 | 5.20.0 |
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free